Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-27_209d38297988658861e6353883fd0bb4_cryptolocker
-
Size
40KB
-
Sample
240127-sth1msegb2
-
MD5
209d38297988658861e6353883fd0bb4
-
SHA1
e4ddd1f00fd43f0a3948c0731b10fc0e2ed4a85b
-
SHA256
a93000fb4cfd314c98b8fbfee0b3720ddc32e24cddc080c8d989bef9050fa41e
-
SHA512
bb9ca13e3f06975701d01163e41ef1855199b4bd99557a735094da7f520197f697819dabcf1736d9b31e029fc911e8cb0b043bf32641543e684e39ddb1735ff7
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZnJkTw:btB9g/WItCSsAGjX7e9N0hunrknJQw
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-27_209d38297988658861e6353883fd0bb4_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-27_209d38297988658861e6353883fd0bb4_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-27_209d38297988658861e6353883fd0bb4_cryptolocker
-
Size
40KB
-
MD5
209d38297988658861e6353883fd0bb4
-
SHA1
e4ddd1f00fd43f0a3948c0731b10fc0e2ed4a85b
-
SHA256
a93000fb4cfd314c98b8fbfee0b3720ddc32e24cddc080c8d989bef9050fa41e
-
SHA512
bb9ca13e3f06975701d01163e41ef1855199b4bd99557a735094da7f520197f697819dabcf1736d9b31e029fc911e8cb0b043bf32641543e684e39ddb1735ff7
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZnJkTw:btB9g/WItCSsAGjX7e9N0hunrknJQw
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-